@floomhq/floom 1.0.64 → 2.0.0

package/dist/init.js

@@ -1,221 +0,0 @@
-import { writeFile, access, mkdir } from "node:fs/promises";
-import { dirname, resolve, basename, extname, join } from "node:path";
-import { createInterface } from "node:readline/promises";
-import { stdin as input, stdout as output } from "node:process";
-import { c, symbols } from "./ui.js";
-import { FloomError } from "./errors.js";
-const TEMPLATES = {
-    generic: `---
-title:
-description:
-version: 1.0
----
-
-# Goal
-
-
-# When to use
-
-
-# Inputs
-
-
-# Instructions
-
-
-# Output
-
-
-# Examples
-`,
-    "brand-voice": `---
-title: Brand voice
-description: Keep agent writing aligned with our company voice.
-type: knowledge
-installs_as: memory
-version: 1.0
----
-
-# Brand Voice
-
-## Use this when
-
-- Writing external copy
-- Editing founder posts
-- Drafting website, email, or support text
-
-## Voice rules
-
-- Be clear and specific.
-- Use short paragraphs.
-- Avoid hype, filler, and vague claims.
-
-## Company facts
-
-- Add product facts here.
-- Add banned phrases here.
-- Add preferred examples here.
-`,
-    "pr-review": `---
-title: PR review
-description: Review pull requests for correctness, regressions, and missing tests.
-type: workflow
-installs_as: claude_skill
-version: 1.0
----
-
-# PR Review
-
-## Goal
-
-Find concrete bugs, regressions, security issues, and missing tests before code merges.
-
-## Inputs
-
-- Diff
-- Test output
-- Relevant files and callers
-
-## Review steps
-
-1. Read the diff and affected call sites.
-2. Check behavior changes against the stated intent.
-3. Look for edge cases, auth/security issues, data loss, and broken contracts.
-4. Verify tests cover the changed behavior.
-
-## Output
-
-List findings first, ordered by severity, with file and line references.
-`,
-    sales: `---
-title: Sales research
-description: Prepare concise account research and outreach context.
-type: workflow
-installs_as: memory
-version: 1.0
----
-
-# Sales Research
-
-## Goal
-
-Prepare useful context before contacting an account.
-
-## Research checklist
-
-- Company description
-- Current priorities or trigger events
-- Relevant people
-- Likely pain
-- Specific reason to reach out
-
-## Output
-
-Return a short account brief and a first-message angle.
-`,
-    support: `---
-title: Support tone
-description: Keep support replies concise, helpful, and calm.
-type: instruction
-installs_as: memory
-version: 1.0
----
-
-# Support Tone
-
-## Rules
-
-- Acknowledge the issue directly.
-- Give the next concrete step.
-- Avoid blaming the user.
-- Avoid long explanations unless the user asks.
-
-## Output
-
-Write the reply in plain language with a clear next action.
-`,
-    onboarding: `---
-title: Onboarding context
-description: Give agents the context needed to help new teammates.
-type: knowledge
-installs_as: memory
-version: 1.0
----
-
-# Onboarding Context
-
-## Company
-
-- Add what the company does.
-- Add important product areas.
-
-## How we work
-
-- Add team norms.
-- Add review expectations.
-- Add recurring workflows.
-
-## Useful links
-
-- Add docs and repositories.
-`,
-};
-export const INIT_TEMPLATES = Object.keys(TEMPLATES);
-const CLI_COMMAND = "npx -y @floomhq/floom";
-export async function init(filename, opts = {}) {
-    const target = filename ?? "skill";
-    const template = opts.template ?? "generic";
-    const folderMode = extname(target).toLowerCase() !== ".md";
-    const outputTarget = folderMode ? join(target, "SKILL.md") : target;
-    const folderPath = folderMode ? resolve(process.cwd(), target) : null;
-    const filePath = resolve(process.cwd(), outputTarget);
-    const exists = await fileExists(filePath);
-    if (exists) {
-        if (!process.stdin.isTTY) {
-            throw new FloomError(`${outputTarget} already exists.`, "Re-run with a different filename, or delete it first.");
-        }
-        const rl = createInterface({ input, output });
-        const answer = (await rl.question(`${c.yellow("?")}  ${outputTarget} already exists. Overwrite? ${c.dim("(y/N)")} `)).trim().toLowerCase();
-        rl.close();
-        if (answer !== "y" && answer !== "yes") {
-            process.stdout.write(`\n${c.dim("Cancelled. Nothing was written.")}\n\n`);
-            return;
-        }
-    }
-    try {
-        if (folderPath)
-            await mkdir(folderPath, { recursive: true });
-        await writeFile(filePath, TEMPLATES[template], "utf8");
-    }
-    catch (err) {
-        const code = err.code;
-        if (code === "ENOENT") {
-            throw new FloomError(`Directory not found: ${dirname(target)}`, "Create the directory first, or choose a filename in the current directory.");
-        }
-        if (code === "EISDIR") {
-            throw new FloomError(`That's a directory, not a file: ${target}`);
-        }
-        throw new FloomError(`Couldn't create ${outputTarget}: ${err.message}`);
-    }
-    process.stdout.write(`\n${symbols.ok}  Created ${c.bold(folderMode ? outputTarget : basename(filePath))}\n`);
-    if (template !== "generic")
-        process.stdout.write(`   ${c.dim(`Template: ${template}`)}\n`);
-    process.stdout.write(`\n   ${c.bold("Next")}\n`);
-    process.stdout.write(`   ${c.dim("1.")} Fill in the title, description, and instructions.\n`);
-    process.stdout.write(`   ${c.dim("2.")} Check it: ${c.cyan(`${CLI_COMMAND} scan ${shellQuote(folderMode ? target : outputTarget)}`)}\n`);
-    process.stdout.write(`   ${c.dim("3.")} Publish:  ${c.cyan(`${CLI_COMMAND} publish ${shellQuote(folderMode ? target : outputTarget)} --type instruction --public`)}\n\n`);
-}
-function shellQuote(value) {
-    if (/^[A-Za-z0-9_./:@%+=,-]+$/.test(value))
-        return value;
-    return `'${value.replace(/'/g, "'\\''")}'`;
-}
-async function fileExists(p) {
-    try {
-        await access(p);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}

package/dist/install.js

@@ -1,305 +0,0 @@
-import { constants } from "node:fs";
-import { lstat, mkdir, open } from "node:fs/promises";
-import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import ora from "ora";
-import { readConfig, resolveApiUrl } from "./config.js";
-import { getJson } from "./lib/api.js";
-import { c, symbols } from "./ui.js";
-import { FloomError } from "./errors.js";
-import { normalizeRemotePackageFiles, packageHash, sha256Bytes } from "./package.js";
-import { manifestKey, markSynced, readSyncManifest, withSyncLock, writeSyncManifest } from "./sync-manifest.js";
-import { targetLabel, targetSkillsDir, targetSkillsDirEnv } from "./targets.js";
-const SLUG_RE = /^[A-Za-z0-9_-]{1,128}$/;
-const FD_PATH_ROOT = "/proc/self/fd";
-function slugFromInput(input) {
-    const trimmed = input.trim();
-    try {
-        const url = new URL(trimmed);
-        const last = url.pathname.split("/").filter(Boolean).at(-1) ?? "";
-        return last.replace(/\.(md|json)$/i, "");
-    }
-    catch {
-        return trimmed.replace(/\.(md|json)$/i, "");
-    }
-}
-function skillPath(root, slug) {
-    return join(root, slug, "SKILL.md");
-}
-function legacySkillPath(root, slug) {
-    return join(root, `${slug}.md`);
-}
-function skillsDirHint(target) {
-    return targetSkillsDirEnv(target);
-}
-function setupCommand(target) {
-    return `npx -y @floomhq/floom setup --target ${target} --yes`;
-}
-async function readLocalFile(path) {
-    try {
-        const handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
-        try {
-            const stat = await handle.stat();
-            if (!stat.isFile())
-                throw new FloomError("Local path is blocked by an existing file or directory.");
-            return await handle.readFile();
-        }
-        finally {
-            await handle.close();
-        }
-    }
-    catch (err) {
-        const code = err.code;
-        if (code === "ENOENT")
-            return null;
-        if (code === "ELOOP")
-            throw new FloomError("Local path is a symbolic link.", "Move or delete the local path, then run `npx -y @floomhq/floom add` again.");
-        if (code === "ENOTDIR" || code === "EISDIR") {
-            throw new FloomError("Local path is blocked by an existing file or directory.");
-        }
-        throw err;
-    }
-}
-async function localPackageHash(root, slug, target, files) {
-    const main = await readLocalFile(target);
-    if (main === null) {
-        const legacy = await readLocalFile(legacySkillPath(root, slug));
-        if (legacy !== null && files.length === 0)
-            return packageHash(legacy.toString("utf8"), []);
-        return null;
-    }
-    const localFiles = [];
-    for (const file of files) {
-        const bytes = await readLocalFile(join(dirname(target), file.path));
-        if (bytes === null)
-            return null;
-        localFiles.push({ path: file.path, bytes, sha256: file.sha256 });
-    }
-    return packageHash(main.toString("utf8"), localFiles);
-}
-async function markInstallSynced(root, slug, files) {
-    const manifest = await readSyncManifest();
-    for (const file of files) {
-        markSynced(manifest, manifestKey(root, file.target), slug, file.hash);
-    }
-    await writeSyncManifest(manifest);
-}
-async function preflightInstallPackage(root, files, opts) {
-    for (const file of files) {
-        await ensureSafeParentDirectory(root, file.target);
-        const existing = await readLocalFile(file.target);
-        if (existing === null)
-            continue;
-        if (sha256Buffer(existing) === file.hash)
-            continue;
-        if (opts.force)
-            continue;
-        return file.target;
-    }
-    return null;
-}
-function sha256Buffer(input) {
-    return sha256Bytes(input);
-}
-async function writeInstallFile(root, target, body) {
-    const parent = await openSafeParentDirectory(root, target);
-    let handle = null;
-    try {
-        handle = await open(childCreatePath(parent, dirname(target), basename(target)), constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
-        await writeAll(handle, body);
-    }
-    finally {
-        await handle?.close();
-        await parent.close();
-    }
-}
-async function overwriteInstallFile(root, target, body) {
-    const parent = await openSafeParentDirectory(root, target);
-    const handle = await open(childCreatePath(parent, dirname(target), basename(target)), constants.O_WRONLY | constants.O_CREAT | constants.O_TRUNC | constants.O_NOFOLLOW, 0o600);
-    try {
-        const stat = await handle.stat();
-        if (!stat.isFile())
-            throw new FloomError("Local path is blocked by an existing file or directory.");
-        await writeAll(handle, body);
-    }
-    finally {
-        await handle.close();
-        await parent.close();
-    }
-}
-async function openSafeParentDirectory(root, target) {
-    await ensureSafeParentDirectory(root, target);
-    return open(dirname(target), constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
-}
-function childCreatePath(parent, fallbackParent, name) {
-    if (process.platform === "linux")
-        return `${FD_PATH_ROOT}/${parent.fd}/${name}`;
-    return join(resolve(fallbackParent), name);
-}
-async function writeAll(handle, body) {
-    const buffer = Buffer.isBuffer(body) ? body : Buffer.from(body, "utf8");
-    let offset = 0;
-    while (offset < buffer.length) {
-        const result = await handle.write(buffer, offset, buffer.length - offset, offset);
-        if (result.bytesWritten === 0)
-            throw new FloomError("Failed to write local skill file.");
-        offset += result.bytesWritten;
-    }
-}
-async function ensureSafeParentDirectory(root, target) {
-    const resolvedRoot = resolve(root);
-    const resolvedParent = resolve(dirname(target));
-    const relativeParent = relative(resolvedRoot, resolvedParent);
-    if (relativeParent === ".." || relativeParent.startsWith(`..${sep}`) || isAbsolute(relativeParent)) {
-        throw new FloomError("Invalid skill target path.");
-    }
-    try {
-        await mkdir(resolvedRoot, { recursive: true, mode: 0o700 });
-    }
-    catch (err) {
-        if (err.code === "EEXIST") {
-            throw new FloomError("Skills directory points to a file, not a directory.", "Set the skills directory env var to a directory, or remove the file blocking it.");
-        }
-        throw err;
-    }
-    await assertSafeDirectory(resolvedRoot);
-    if (!relativeParent || relativeParent === ".")
-        return;
-    let current = resolvedRoot;
-    for (const segment of relativeParent.split(sep).filter(Boolean)) {
-        current = join(current, segment);
-        try {
-            await assertSafeDirectory(current);
-        }
-        catch (err) {
-            if (err.code !== "ENOENT")
-                throw err;
-            await mkdir(current, { mode: 0o700 });
-            await assertSafeDirectory(current);
-        }
-    }
-}
-async function assertSafeDirectory(path) {
-    const stat = await lstat(path);
-    if (stat.isSymbolicLink()) {
-        throw new FloomError("Local path contains a symbolic link.", "Move or delete the local path, then run `npx -y @floomhq/floom add` again.");
-    }
-    if (!stat.isDirectory()) {
-        throw new FloomError("Local path is blocked by an existing file or directory.");
-    }
-}
-export async function install(slugInput, opts = {}) {
-    const targetAgent = opts.target ?? "claude";
-    const root = targetSkillsDir(targetAgent);
-    const slug = slugFromInput(slugInput);
-    if (!SLUG_RE.test(slug)) {
-        throw new FloomError(`Invalid skill slug: ${slugInput}`);
-    }
-    const cfg = await readConfig();
-    const apiUrl = resolveApiUrl(cfg);
-    const spinner = ora({ text: c.dim(`Adding ${slug}...`), color: "yellow" }).start();
-    let detail;
-    try {
-        detail = await getJson(`${apiUrl}/api/v1/skills/${encodeURIComponent(slug)}`, "fetch skill", cfg?.accessToken);
-        if (!detail || typeof detail.body_md !== "string") {
-            throw new FloomError("Invalid skill response.");
-        }
-    }
-    catch (err) {
-        spinner.stop();
-        throw err;
-    }
-    const target = skillPath(root, slug);
-    const remotePackageFiles = normalizeRemotePackageFiles(detail.package_files ?? detail.files);
-    const installFiles = [
-        { target, bytes: detail.body_md, hash: sha256Bytes(detail.body_md) },
-        ...remotePackageFiles.map((file) => ({
-            target: join(dirname(target), file.path),
-            bytes: file.bytes,
-            hash: file.sha256,
-        })),
-    ];
-    const remoteHash = packageHash(detail.body_md, remotePackageFiles);
-    let action = "installed";
-    let manifestWarning = null;
-    await withSyncLock(async () => {
-        try {
-            await mkdir(root, { recursive: true, mode: 0o700 });
-        }
-        catch (err) {
-            if (err.code === "EEXIST") {
-                throw new FloomError(`${skillsDirHint(targetAgent)} points to a file, not a directory.`, `Set ${skillsDirHint(targetAgent)} to a directory, or remove the file blocking it.`);
-            }
-            throw err;
-        }
-        await ensureSafeParentDirectory(root, target);
-        const existing = await localPackageHash(root, slug, target, remotePackageFiles);
-        const conflictingTarget = await preflightInstallPackage(root, installFiles, opts.force ? { force: true } : {});
-        if (conflictingTarget) {
-            throw new FloomError("Local skill already exists with different content.", `Run \`npx -y @floomhq/floom add <link> --force\` to replace it, or move the local file first: ${relative(root, conflictingTarget).split(sep).join("/")}`);
-        }
-        if (existing === remoteHash) {
-            action = "unchanged";
-        }
-        else if (opts.force) {
-            try {
-                await overwriteInstallFile(root, target, detail.body_md);
-                for (const file of remotePackageFiles) {
-                    await overwriteInstallFile(root, join(dirname(target), file.path), file.bytes);
-                }
-            }
-            catch (err) {
-                const code = err.code;
-                if (code === "ELOOP")
-                    throw new FloomError("Local path is a symbolic link.", "Move or delete the local path, then run `npx -y @floomhq/floom add` again.");
-                throw err;
-            }
-            action = "updated";
-        }
-        else if (existing !== null) {
-            throw new FloomError("Local skill already exists with different content.", "Run `npx -y @floomhq/floom add <link> --force` to replace it, or move the local file first.");
-        }
-        else {
-            try {
-                await writeInstallFile(root, target, detail.body_md);
-                for (const file of remotePackageFiles) {
-                    await writeInstallFile(root, join(dirname(target), file.path), file.bytes);
-                }
-            }
-            catch (err) {
-                const code = err.code;
-                if (code === "EEXIST") {
-                    throw new FloomError("Local skill already exists with different content.", "Move or delete the local file, then run `npx -y @floomhq/floom add` again.");
-                }
-                if (code === "ELOOP") {
-                    throw new FloomError("Local path is a symbolic link.", "Move or delete the local path, then run `npx -y @floomhq/floom add` again.");
-                }
-                if (code === "ENOENT") {
-                    throw new FloomError("Local path changed during install.", "Run `npx -y @floomhq/floom add` again.");
-                }
-                throw err;
-            }
-            action = "installed";
-        }
-        try {
-            await markInstallSynced(root, slug, installFiles);
-        }
-        catch (err) {
-            manifestWarning = err instanceof Error ? err.message : String(err);
-        }
-    });
-    spinner.stop();
-    process.stdout.write(`\n${symbols.ok}  [floom] ${action} ${c.bold(slug)}\n`);
-    process.stdout.write(`   ${c.dim(dirname(target))}\n\n`);
-    if (manifestWarning) {
-        process.stdout.write(`   ${c.yellow("!")} ${c.dim(`Installed, but sync tracking was not updated: ${manifestWarning}`)}\n\n`);
-    }
-    process.stdout.write(`   ${c.bold("Next")}\n`);
-    if (opts.setup) {
-        process.stdout.write(`   ${c.dim("1.")} Floom is connecting ${targetLabel(targetAgent)} now.\n`);
-        process.stdout.write(`   ${c.dim("2.")} Tell your agent to use ${c.bold(slug)} when it matches the task.\n\n`);
-    }
-    else {
-        process.stdout.write(`   ${c.dim("1.")} Tell your agent to use ${c.bold(slug)} when it matches the task.\n`);
-        process.stdout.write(`   ${c.dim("2.")} One-time setup: ${c.cyan(setupCommand(targetAgent))}\n\n`);
-    }
-}

package/dist/launch.js

@@ -1,110 +0,0 @@
-import { readFile } from "node:fs/promises";
-import { CONFIG_DIR, readConfig, resolveApiUrl } from "./config.js";
-import { floomFetch } from "./lib/api.js";
-import { CLI_VERSION } from "./version.js";
-import { c, symbols } from "./ui.js";
-import { FloomError } from "./errors.js";
-import { join } from "node:path";
-async function readDaemonStatus() {
-    try {
-        return JSON.parse(await readFile(join(CONFIG_DIR, "daemon-status.json"), "utf8"));
-    }
-    catch (err) {
-        if (err.code === "ENOENT")
-            return null;
-        throw err;
-    }
-}
-async function getJson(url, action, token) {
-    try {
-        const res = await floomFetch(url, action, {
-            ...(token ? { token } : {}),
-            timeoutMs: 8_000,
-            rateLimitRetries: 0,
-        });
-        return (await res.json());
-    }
-    catch {
-        return null;
-    }
-}
-export async function launchGate(opts) {
-    const cfg = await readConfig();
-    const apiUrl = resolveApiUrl(cfg ?? undefined);
-    const [health, cliVersion, daemon] = await Promise.all([
-        getJson(`${apiUrl}/api/v1/health`, "check launch health", cfg?.accessToken),
-        getJson(`${apiUrl}/api/v1/cli-version`, "check CLI version", cfg?.accessToken),
-        readDaemonStatus(),
-    ]);
-    const targetResults = daemon?.last_run ?? {};
-    const targets = daemon?.targets ?? [];
-    const daemonLive = daemonIsLive(daemon);
-    const daemonTargetsOk = targets.length > 0 && targets.every((target) => targetResults[target]?.ok === true);
-    const conflictTargets = targets.filter((target) => (targetResults[target]?.conflicts ?? 0) > 0);
-    const daemonTargetsClean = daemonTargetsOk && conflictTargets.length === 0;
-    const releaseAligned = health?.version === CLI_VERSION && cliVersion?.latest === CLI_VERSION;
-    const daemonAligned = daemonLive && daemon?.version === CLI_VERSION;
-    const payload = {
-        ok: Boolean(health?.ok && releaseAligned && daemonAligned && daemonTargetsClean),
-        release: {
-            cli: CLI_VERSION,
-            web: health?.version ?? null,
-            cli_latest: cliVersion?.latest ?? null,
-            cli_min: cliVersion?.min ?? null,
-            release_aligned: releaseAligned,
-        },
-        health: health ?? null,
-        daemon: daemon ? {
-            running: daemonLive,
-            version: daemon.version ?? null,
-            hostname: daemon.hostname ?? null,
-            targets,
-            all_targets_ok: daemonTargetsOk,
-            all_targets_clean: daemonTargetsClean,
-            conflict_targets: conflictTargets,
-            last_completed_at: daemon.last_completed_at ?? null,
-            next_run_at: daemon.next_run_at ?? null,
-            last_run: targetResults,
-        } : null,
-        escalations: [
-            ...(releaseAligned ? [] : ["CLI, web health, and server latest versions are not aligned."]),
-            ...(daemonLive ? [] : ["Daemon status is stale or the recorded daemon process is not running."]),
-            ...(daemon?.version === CLI_VERSION ? [] : ["Daemon is not running on the pinned CLI version."]),
-            ...(targets.length === 0 || daemonTargetsOk ? [] : ["Latest daemon cycle has not yet passed for every configured target."]),
-            ...(conflictTargets.length === 0 ? [] : [`Latest daemon cycle has unresolved conflicts for: ${conflictTargets.join(", ")}.`]),
-        ],
-    };
-    if (opts.json) {
-        process.stdout.write(`${JSON.stringify(payload, null, 2)}\n`);
-        return;
-    }
-    process.stdout.write(`\n${symbols.dot}  ${c.bold("Floom launch gate")}\n\n`);
-    process.stdout.write(`   ${c.dim("CLI:")} ${payload.release.cli}\n`);
-    process.stdout.write(`   ${c.dim("Web:")} ${payload.release.web ?? "unknown"}\n`);
-    process.stdout.write(`   ${c.dim("Daemon:")} ${payload.daemon?.running ? `running (${payload.daemon.version})` : "not running"}\n`);
-    if (payload.escalations.length > 0) {
-        for (const escalation of payload.escalations)
-            process.stdout.write(`   ${symbols.bullet} ${escalation}\n`);
-        throw new FloomError("Launch gate did not pass.", "Run with --json for machine-readable details.");
-    }
-    process.stdout.write(`\n${symbols.ok}  Launch gate passed for the pinned local release identity.\n\n`);
-}
-function daemonIsLive(status) {
-    if (!status?.running)
-        return false;
-    if (!status.pid || status.pid < 1)
-        return false;
-    try {
-        process.kill(status.pid, 0);
-    }
-    catch {
-        return false;
-    }
-    if (!status.next_run_at || !status.interval_seconds)
-        return true;
-    const nextRun = Date.parse(status.next_run_at);
-    if (!Number.isFinite(nextRun))
-        return false;
-    const graceMs = Math.max(status.interval_seconds * 2000, 120_000);
-    return nextRun + graceMs >= Date.now();
-}